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Top Stories 

• The U.S. Department of Defense took the Joint Personnel Adjudication System offline 
after the Office of Personnel Management announced plans June 29 to shut down its e-QIP 
system for 4-6 weeks for security improvements. - Nextgov.com (See item 5 ) 

• An international law enforcement operation targeting airline fraudsters and organized at 
140 airports in 49 countries detained 130 individuals June 16 - 17. - Softpedia (See item 8) 

• Approximately 4,000 Baltimore residents and businesses were without water service June 
30 while crews replaced 2 underground valves after a 16-inch water main break. - WBLA 
11 Baltimore (See item 12 ) 

• The FBI and the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives reported June 
29 that an investigation is ongoing to determine if 5 church fires were linked to arson in 4 
southern States during the week of June 21. - Washington Post (See item 22 ) 
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Energy Sector 

See item 17 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

1. June 29, Kennewick Tri-City Herald - (Washington) Richland nuclear plant 
producing electricity again. Energy Northwest officials reported that the Columbia 
Generating Station in Richland was back online June 28 following a planned 42-day 
maintenance and refueling outage. 

Source: http://www.tri-cityherald.com/2015/06/29/3631127 richland-nuclear-plant- 
producing.html?rh=l 
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Critical Manufacturing Sector 

2. June 29, U.S. Department of Labor - (Illinois) Melrose Park, Illinois, metal shop 
exposes workers to machine hazards. The Occupational Safety and Health 
Administration cited Chicago-based Midwest Manufacturing and Distributing Inc., 
June 29 with 3 violations, including inadequate machine guarding. Proposed penalties 
total $54,780. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28200 

3. June 29, U.S. Department of Labor - (Ohio) Complaint inspection finds workers 
exposed to amputation hazards at Cleveland Die & Manufacturing Company. The 

Occupational Safety and Health Administration cited Cleveland Die & Manufacturing 
Company June 29 with 11 serious violations including exposing workers to operating 
parts of machinery, lack of procedures to ensure equipment was de-energized, and 
inadequate hazardous chemical training, among others. Proposed penalties total 
$59,400. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28203 

4. June 29, Reuters - (National) FCA US recalls SUVs over suspension component. 
Fiat Chrysler Automobiles issued a recall June 28 for approximately 7,690 Grand 
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Cherokee and Durango SUVs in Canada and the U.S. due to an issue with improperly 
heat-treated suspension components that could lead to rear-end instability and reduced 
braking power. The company advised about 65 U.S. owners that they should stop 
driving their vehicles immediately. 

Source: http://www.reuters.com/article/2015/06/29/us-fca-us-recall- 



idUSKCN0P80Z220 150629 



For another story, see item 17 
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Defense Industrial Base Sector 

5. June 30, Nextgov.com - (International) Pentagon, OPM shut down background 
check systems. The U.S. Department of Defense Joint Personnel Adjudication System 
was taken offline following the Office of Personnel Management’s (OPM) June 29 
announcement that the e-QIP system would be offline 4-6 weeks for security 
improvements. A vulnerability in the OPM tool that links to JPAS was discovered 
during a probe of the recent OPM breach. 

Source: http://www.defenseone.com/technologv/2015/06/pentagon-opm-shut-down- 
background-check-systems/1 16554/ 

For another story, see item 19 
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Financial Services Sector 

6. June 30, WWLP 22 Springfield - (Massachusetts) 2 downtown Springfield banks 
robbed, 3 suspicious packages left behind. Springfield officials are investigating two 
bank robberies at a United Bank and a Bank of America in Springfield, Massachusetts, 
after a suspect allegedly left three suspicious packages and stole cash June 29. 

Source: http://wwlp.com/2015/06/29/downtown-springfield-bank-robbed-police- 
investigating-3-suspicious-packages/ 

For additional stories, see items 17 and 19 
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Transportation Systems Sector 

7. June 30, WSOC 9 Charlotte - (North Carolina) Trooper: 26-year-old killed in crash 
that closed 1-85. Interstate 85 northbound in Charlotte was shut down for 
approximately 3 hours June 29 while crews responded to a 2-vehicle accident that 
killed 1 and injured 1 . 

Source: http://www.wsoctv.com/news/news/local/i-85-shut-down-troopers-investigate- 
fatal- accident/nmn4c/ 
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8. June 30, Softpedia - (International) 130 arrested in global operation against airline 
ticket fraudsters. An international law enforcement operation targeting airline 
fraudsters and organized at 140 airports in 49 countries, detained 130 individuals for 
possessing airline tickets purchased using stolen payment card data June 16-17. 
Source: http://news.softpedia.com/news/130-arrested-in-global-operation-against- 
airline-ticket-fraudsters-485663.shtml 

9. June 29, KCRA Sacramento - (California) CHP: 1 killed in big rig crash on Highway 
16 in Yolo County. Highway 16 in Yolo County was shut down for approximately 7 
hours June 29 due to a 4-vehicle accident that killed 1 person and injured 3 others. 
Source: http://www.kcra.com/news/local-news/news-sacramento/chp-l-killed-in-big- 
rig-crash-on-hwy- 16-in- volo-county/33828640 

For another story, see item 17 
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Food and Agriculture Sector 

10. June 29, U.S. Food and Drug Administration - (National) Rocky Mountain Foods, 
Inc. voluntarily recalls Free Range Snack Co. brand 16 oz. Island Fruit and Nut 
Trail Mix and bulk Macadamia Nuts because of possible health risk. The U.S. 
Food and Drug Administration reported June 26 that Rocky Mountain Foods Inc., of 
Denver Colorado, is voluntarily recalling certain lots of Island Fruit and Nut Trail Mix 
packaged under the Free Range Snack Co. Brand, and certain lots of bulk Macadamia 
Nuts due to possible salmonella contamination. The products were shipped to retails 
stores nationwide. 

Source: http://www.fda.gov/Safety/Recalls/ucm453116.htm 
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Water and Wastewater Systems Sector 

11. June 30, Columbia Patch - (Maryland) 96,000 gallons of sewage overflowed in 
Columbia: health department. The Howard County Health Department reported that 
96,000 gallons of sewage overflowed from a broken pipe after into a small stream in 
Phelps Luck June 28 after recent storms and warned residents to stay away from the 
stream until it is diluted. The Maryland Department of the Environment has been 
notified of the situation. 

Source: http://patch.com/marvland/columbia/96000-gallons-sewage-overflowed- 
columbia-health-department-0 

12. June 30, WBLA 11 Baltimore - (Maryland) Thousands remain without water in 
north Baltimore. Approximately 4,000 Baltimore residents and businesses were 
without water service June 30 while crews replaced 2 underground valves after a 16- 
inch water main break. Repairs should be completed by the end of June 30. 
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Source: http://www.wbaltv.com/news/thousands-to-lose-water-service-in-north- 
baltimore/33833834 



13. June 30, WCHS 8 Charleston - (West Virginia) Thousands affected by latest water 
leak; water company hopes to have repairs made by Tuesday afternoon. At least 
2,000 customers were without water June 30 while West Virginia American Water Co., 
crews repaired a water leak in Dunbar. This is the second leak in the last week and 
officials issued a water advisory for those affected. 

Source: http://www.wchstv.com/news/features/evewitness-news/stories/Thousands- 
Affected-By-Latest-Water-Leak-WVAW-Hopes-To-Have-Repairs-Made-By-Tuesday- 
Afternoon- 156193. shtml#. VZKUlvlVhBc 
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Healthcare and Public Health Sector 

14. June 29, Huntsville Times - (Mississippi) Jackson County to sue former SRHS audit 
firm KMPG. Jackson County officials filed a Federal lawsuit June 29 against KPMG, 
the former audit firm for Singing River Health System (SRHS), after an investigation 
revealed that the company’s audit work failed for number of reasons, resulting in an 
$88 million accounting adjustment in 2012. 

Source: http://blog.gulfIive.com/mississippi-press- 
news/2015/06/jackson county to sue former s.html 

15. June 29, Idaho Statesman - (Idaho) Refrigerant leak prompts evacuation of Boise 
surgical center. The Boise Fire Department reported that a surgical center in the St. 
Luke’s complex was evacuated June 29 after a refrigerant leak was found in the 
building’s basement, prompting HAZMAT crews to respond. The building was 
ventilated and crews cleaned the area. 

Source: http://www.idahostatesman.com/2015/06/29/3874684 refrigerant-leak-prompt- 
evacuation.html?rh=l 



For another story, see item 17 



1 Return to top i 



Government Facilities Sector 

For additional stories, see items 5, 17, and 19 
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Emergency Services Sector 

16. June 29, Cleveland Plain Dealer -{ Ohio) Fake shooting, hostage call elicits SWAT 
response in Parma. Parma, Ohio officers reported June 29 that a trend called 
“swatting” may be jeopardizing the safety of first responders and SWAT teams after a 
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June 28 hoax shooting and hostage call prompted the response of several police officers 
and the department’s SWAT team. Officials believe the incident was an example of the 
growing trend and are investigating the case. 

Source: 

http://www.cleveland.com/parma/index.ssf/2015/06/fake shooting hostage call eli.ht 
ml 
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Information Technology Sector 

17. June 30, Softpedia - (International) Dridex is the most prevalent banking malware 
in the corporate sector. SecurityScorecard released findings from a report revealing 
that the Dridex banking trojan was the most prevalent malware found in corporate 
environments from January - May, primarily targeting the manufacturing and retail 
sectors, followed by the Beloh and Tinba trojans, which targeted telecommunications 
and technologies companies. 

Source: http://news.softpedia.com/news/dridex-is-the-most-prevalent-banking- 
malware-in-the-corporate-sector-485679.shtml 

18. June 30, Securityweek - (International) Yahoo patches SSRF vulnerability in image 
processing system: researcher. A security researcher reported that Y ahoo patched a 
server-side request forgery (SSRF) vulnerability affecting all of its services that 
required images to be processed in which an attacker could use the vulnerability to 
bypass controls and access data on the affected system. 

Source: http://www.securitvweek.com/vahoo-patches-ssrf-vulnerabilitv-image- 
processing-system-researcher 

19. June 29, Securityweek - (International) Many organizations using Oracle PeopleSoft 
vulnerable to attacks: report. ERPScan released findings from a report revealing that 
Oracle’s PeopleSoft contained several vulnerabilities including information disclosure, 
extensible markup language external entity (XXE), cross-site scripting (XSS), and 
authentication bypass flaws as well as configuration-related issues that could allow an 
attacker to breach PeopleSoft systems connected to the Internet. 

Source: http://www.securitvweek.com/manv-organizations-using-oracle-peoplesoft- 
vulnerable- attacks -report 

For another story, see item 5 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



See item 17 
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Commercial Facilities Sector 

20. June 30, Associated Press - (Oregon) Fire chief says blaze destroys historic stadium 
in Oregon. A June 29 fire destroyed Eugene, Oregon’s historic Civic Stadium and 
prompted the temporary evacuation of a two-block area after the stadium’s dry- 
seasoned lumber caused the blaze to spread quickly. An investigation is ongoing to 
determine the cause of the fire and no injuries were reported. 

Source: http://www.weirtondailytimes.com/page/content.detail/id/876387/Fire-chief- 
savs-blazc-dcstroys-historic-stadium-in-Orcgon.html?isap=l &nav=501 5 

21. June 30, KWU 5 Las Vegas - (Nevada) Dozens lose everything in massive 
apartment lire. A 3-alarm fire at the Sandpebble Village apartment complex in Las 
Vegas destroyed 16 apartment units, displaced more than 50 residents, and injured 5 
people June 28, after starting from the exterior of the building. Fire crews extinguished 
the flames and damages total $1.6 million. 

Source: http://www.fox5vegas.com/storv/29437612/dozens-lose-everything-in- 
massive-apartment-fire 

22. June 29, Washington Post - (National) Five predominately black southern churches 
burn within a week; arson suspected in at least three. The FBI and the U.S. Bureau 
of Alcohol, Tobacco, Firearms and Explosives reported June 29 that an investigation is 
ongoing to determine if 5 church fires were linked to arson in 4 southern States during 
the week of June 21. The motives remain unclear. 

Source: http://www.washingtonpost.com/news/morning-mix/wp/2015/06/29/six- 

predominately-black-southem-churches-burn-within-a-week-with-arson-suspected-in- 

at-least-three/ 

23. June 28, WWLP 22 Springfield - (Massachusetts) Allen St. gas leak fixed, roads no 
longer blocked. A June 27 gas leak in Springfield, Massachusetts prompted the 
evacuation of 20 people and a surrounding store, while power was shut down after fire 
crews received calls of gas smells. Columbia Gas resolved the issue. 

Source: http://wwlp.com/2015/06/27/20-workers-and-a-nearby-store-was-evacuated- 
due-to-a-gas-leak-in-springfield/ 

For additional stories, see items 17 and 19 
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Dams Sector 
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Nothing to report 
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NTAS 

A^viwfT 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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